Credit Card Fraud and German Risk

Two topics here.

First, if anyone is interested in playing a Game of German Risk online, let me know. It's pretty relaxed--you have a full 24 hours to take a turn. No 3 or 4 hour block of time required, just a couple minutes here and there (and you don't have to sit around waiting while others take their turns). The map only allows for 4 players.

Second, our credit card info got swiped somehow. I looked at our account info yesterday and saw a $200 charge for "XBOX Live." I called Discover, and apparently some other unauthorized charges had been made at the same time (one $1 charge for Yahoo and one larger charge to Blizzard for World of Warcraft). These additional charges didn't show up on the online account--apparently Discover was double-checking to make sure they were valid charges. Of course, once their suspicions were confirmed, they canceled the account. The question remains--if Discover had suspicions, why didn't they contact me?

I'm not sure how our credit card information got stolen--I suspect a nearby gas station got hit by a "Skimmer" which transmits credit card information to thieves, but I really don't know. Hopefully everything will resolve and they'll catch the bad guy--and hopefully I won't end up paying $200 for the thief's use of XBox Live.